$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b3f6b688-cff4-402f-97d5-02f6f1886b7e/5d7wm5lPjPYLrYyQKcAGV3ULImc.mft File: 5d7wm5lPjPYLrYyQKcAGV3ULImc.mft (raw, json) Hash identifier: q/cXbQ5vLQU6iugmqX09VLke02/VbLOGPkJ+uTOxkvE= Subject key identifier: 71:8F:3F:69:D2:E4:24:49:9D:D6:78:D5:58:37:28:BB:C1:DF:89:68 Authority key identifier: 6D:CA:65:D0:71:4D:7E:F2:56:90:BC:09:13:D3:54:DB:AC:89:2A:5E Certificate issuer: /CN=6f9b985b0fe5def09b994f8cf60bad8c9029c00657750b2267 Certificate serial: 21CA50DA20B803840C6107A50539DDE4EBECDC07 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7276b2fa-548d-4970-8314-8d73945c34d8/6f9b985b0fe5def09b994f8cf60bad8c9029c00657750b2267.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b3f6b688-cff4-402f-97d5-02f6f1886b7e/5d7wm5lPjPYLrYyQKcAGV3ULImc.mft Manifest number: 038E Signing time: Mon 05 May 2025 17:44:11 +0000 Manifest this update: Mon 05 May 2025 17:44:11 +0000 Manifest next update: Fri 09 May 2025 17:44:11 +0000 Files and hashes: 1: 2592ade6-505a-4e24-928b-9a1e71b309ae.roa (hash: eE8X1RrVrKvvUXD1nxNU9vKXuwUWRpAhLKt4i27dkVc=) 2: 5d7wm5lPjPYLrYyQKcAGV3ULImc.crl (hash: S4ziUFJYOwAbYVMeLofXmZdVESXYD2CF9NTIzW8iJ9M=) 3: a8ff9337-21d8-4d5e-b988-d1a983d73aea.roa (hash: uaj6GLTCaWtWOZYLvsoZgVaca0GEkkldPA3YspVjxfI=) 4: c518c762-ddbf-4352-b9b9-1484318adaa8.roa (hash: 1z9ac+kxKh16qodYIl5LkYNtLzCtjKNFn32/qUmuXn0=) Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b3f6b688-cff4-402f-97d5-02f6f1886b7e/5d7wm5lPjPYLrYyQKcAGV3ULImc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b3f6b688-cff4-402f-97d5-02f6f1886b7e/5d7wm5lPjPYLrYyQKcAGV3ULImc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7276b2fa-548d-4970-8314-8d73945c34d8/6f9b985b0fe5def09b994f8cf60bad8c9029c00657750b2267.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7276b2fa-548d-4970-8314-8d73945c34d8/7276b2fa-548d-4970-8314-8d73945c34d8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7276b2fa-548d-4970-8314-8d73945c34d8/7276b2fa-548d-4970-8314-8d73945c34d8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7276b2fa-548d-4970-8314-8d73945c34d8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 08 May 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:ca:50:da:20:b8:03:84:0c:61:07:a5:05:39:dd:e4:eb:ec:dc:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6f9b985b0fe5def09b994f8cf60bad8c9029c00657750b2267 Validity Not Before: May 5 17:44:11 2025 GMT Not After : May 9 17:44:11 2025 GMT Subject: serialNumber=765d3d6ea249ca5400f69d4430f008f409cd80e1e372d8f23e4be6e6f592c843, CN=15f1683a-c0c2-4266-9a96-ecf9eba3239c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:66:4a:b5:54:5b:ef:96:21:8c:11:b8:4d:8d: 92:91:39:a4:c8:52:3f:5e:b1:9f:2b:7b:be:6c:f5: 02:dc:a1:6b:0c:75:3f:cd:01:08:c7:00:4b:ad:d2: 7a:72:d8:56:c1:61:2d:a4:26:bb:08:f4:58:95:77: 8b:a0:5f:92:3c:71:95:2e:30:37:6c:72:bb:f9:df: 75:86:3c:19:63:55:e3:a8:18:a1:10:8a:36:f2:62: 42:53:7b:37:09:fa:12:46:91:d6:7d:4f:b7:a4:a7: f8:d8:63:5f:3f:63:dd:85:45:1c:af:79:e2:b8:c6: 40:f3:63:d8:7c:0c:4b:37:f3:bd:a8:15:d2:af:ec: 2c:8b:8c:1a:86:67:54:77:f3:0e:7a:2a:4c:64:a7: 51:e3:33:ab:4b:bc:53:95:8b:2f:83:f2:54:4b:3f: 47:36:05:df:0e:ac:29:95:93:84:66:5a:26:43:b1: e7:39:e4:33:23:40:d0:be:81:65:8e:28:24:6c:99: 4f:49:31:06:ec:9b:5e:e7:a2:5b:e0:aa:03:f5:1f: c7:5e:64:47:76:ce:5e:2c:3a:b7:b4:04:bf:3a:65: 58:eb:b7:aa:3d:df:ef:74:42:47:56:f1:f1:57:ff: c9:3a:ee:49:b8:af:0c:70:3d:31:68:44:90:a7:c7: 27:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:8F:3F:69:D2:E4:24:49:9D:D6:78:D5:58:37:28:BB:C1:DF:89:68 X509v3 Authority Key Identifier: keyid:6D:CA:65:D0:71:4D:7E:F2:56:90:BC:09:13:D3:54:DB:AC:89:2A:5E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7276b2fa-548d-4970-8314-8d73945c34d8/6f9b985b0fe5def09b994f8cf60bad8c9029c00657750b2267.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b3f6b688-cff4-402f-97d5-02f6f1886b7e/5d7wm5lPjPYLrYyQKcAGV3ULImc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b3f6b688-cff4-402f-97d5-02f6f1886b7e/5d7wm5lPjPYLrYyQKcAGV3ULImc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ba:2a:b2:28:36:0d:74:b2:56:38:f8:8f:89:48:d1:4e:4b:4d: 9d:2b:13:7b:93:84:2b:62:f1:66:1e:8c:4c:38:2e:6d:d5:1b: a3:79:18:3f:bf:4e:cb:a2:f9:c7:c4:c7:bc:47:3b:98:5f:d6: 63:d4:ca:a5:e3:e7:0f:97:b1:2f:d8:8a:ef:8e:43:ca:cc:af: e2:60:73:a7:0e:df:d4:fd:30:3e:6d:9e:60:f9:d1:1c:e0:ed: bd:13:9f:b8:bd:d5:50:ed:e8:8a:e0:88:cc:d4:ff:15:82:2b: f9:bd:f7:4e:18:94:ee:a6:83:67:03:a5:6b:99:04:37:07:9d: b6:99:22:f4:42:39:4d:05:91:a2:f1:fc:64:aa:ca:08:5c:fe: f0:38:47:f8:55:9c:98:b4:57:89:60:2e:1a:5d:a3:1f:a5:75: ff:f3:49:12:c6:6f:3e:9d:c0:ec:b9:6b:1f:66:e0:e2:92:da: bd:ed:be:3a:c8:40:93:21:5f:95:5c:31:ee:8f:bd:42:1e:c5: bd:a8:bb:a3:a0:46:fb:5b:0d:bb:af:70:56:34:bb:7a:25:48: 1e:9a:32:9c:68:73:4b:32:81:c6:8f:31:38:43:83:83:31:7f: f0:97:56:e2:00:67:bb:4b:b5:41:21:ab:bd:ae:33:8a:7f:1e: cb:22:29:c1 -----BEGIN CERTIFICATE----- MIIGCDCCBPCgAwIBAgIUIcpQ2iC4A4QMYQelBTnd5Ovs3AcwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmY5Yjk4NWIwZmU1ZGVmMDliOTk0ZjhjZjYwYmFkOGM5 MDI5YzAwNjU3NzUwYjIyNjcwHhcNMjUwNTA1MTc0NDExWhcNMjUwNTA5MTc0NDEx WjB6MUkwRwYDVQQFE0A3NjVkM2Q2ZWEyNDljYTU0MDBmNjlkNDQzMGYwMDhmNDA5 Y2Q4MGUxZTM3MmQ4ZjIzZTRiZTZlNmY1OTJjODQzMS0wKwYDVQQDEyQxNWYxNjgz YS1jMGMyLTQyNjYtOWE5Ni1lY2Y5ZWJhMzIzOWMwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDQZkq1VFvvliGMEbhNjZKROaTIUj9esZ8re75s9QLcoWsM dT/NAQjHAEut0npy2FbBYS2kJrsI9FiVd4ugX5I8cZUuMDdscrv533WGPBljVeOo GKEQijbyYkJTezcJ+hJGkdZ9T7ekp/jYY18/Y92FRRyveeK4xkDzY9h8DEs3872o FdKv7CyLjBqGZ1R38w56Kkxkp1HjM6tLvFOViy+D8lRLP0c2Bd8OrCmVk4RmWiZD sec55DMjQNC+gWWOKCRsmU9JMQbsm17nolvgqgP1H8deZEd2zl4sOre0BL86ZVjr t6o93+90QkdW8fFX/8k67km4rwxwPTFoRJCnxyc9AgMBAAGjggLBMIICvTAdBgNV HQ4EFgQUcY8/adLkJEmd1njVWDcou8HfiWgwHwYDVR0jBBgwFoAUbcpl0HFNfvJW kLwJE9NU26yJKl4wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz Lzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC83Mjc2YjJmYS01 NDhkLTQ5NzAtODMxNC04ZDczOTQ1YzM0ZDgvNmY5Yjk4NWIwZmU1ZGVmMDliOTk0 ZjhjZjYwYmFkOGM5MDI5YzAwNjU3NzUwYjIyNjcuY2VyMIGVBggrBgEFBQcBCwSB iDCBhTCBggYIKwYBBQUHMAuGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvYjNmNmI2ODgtY2ZmNC00MDJmLTk3ZDUtMDJm NmYxODg2YjdlLzVkN3dtNWxQalBZTHJZeVFLY0FHVjNVTEltYy5tZnQwgYgGA1Ud HwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFzdC0yLmFtYXpv bmF3cy5jb20vdm9sdW1lL2IzZjZiNjg4LWNmZjQtNDAyZi05N2Q1LTAyZjZmMTg4 NmI3ZS81ZDd3bTVsUGpQWUxyWXlRS2NBR1YzVUxJbWMuY3JsMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQC6KrIo Ng10slY4+I+JSNFOS02dKxN7k4QrYvFmHoxMOC5t1RujeRg/v07LovnHxMe8RzuY X9Zj1Mql4+cPl7Ev2IrvjkPKzK/iYHOnDt/U/TA+bZ5g+dEc4O29E5+4vdVQ7eiK 4IjM1P8Vgiv5vfdOGJTupoNnA6VrmQQ3B522mSL0QjlNBZGi8fxkqsoIXP7wOEf4 VZyYtFeJYC4aXaMfpXX/80kSxm8+ncDsuWsfZuDiktq97b46yECTIV+VXDHuj71C HsW9qLujoEb7Ww27r3BWNLt6JUgemjKcaHNLMoHGjzE4Q4ODMX/wl1biAGe7S7VB Iau9rjOKfx7LIinB -----END CERTIFICATE-----Generated at Tue May 6 08:26:03 2025 by rpki-client